[Scam]: Fake 10ktf website

[Dave1]

What happened: There is a fake https://10ktf.com/ out there so be careful. And if you are going to look at https://opensea.io/collection/10ktf, it's one of the biggest out there. So criminals just copy the website and will ask you to connect your wallet right away.

Website:

Code:

https://l0ktf.com/

Archive: https://web.archive.org/web/20230629213126/https://l0ktf.com/

So again, this is a warning to everyone, the real website is: https://10ktf.com/.

AS you can see if it very hard to spot as the criminals is using a known attack vector: homoglyph attack. And the this fake website is very similar to the real website:

[1714707458]

1714707458

[1714707458]

1714707458

[1714707458]

1714707458

[1714707458]

1714707458

[1714707458]

1714707458

[1714707458]

1714707458

[BD Crypto]

So criminals just copy the website and will ask you to connect your wallet right away.

Nice catch OP. Now a days most of the scam or phishing sites are asking users to connect their wallet. So we must have more awareness and should learn well about where we are going to connect our wallet to prevent scam attacks. This phishing site is really very tough to catch by a Beginner because it's almost similar and a very little difference at the website link. If someone don't focus on it properly he will obviously fall into this trap.
This domain just registered 2 days ago and you have caught much earlier.

Code:

 Domain:l0ktf.com
Registrar:GMO Internet Group, Inc. d/b/a Onamae.com
Registered On:2023-06-29
Expires On:2024-06-29
Updated On:2023-06-29
Status:clientTransferProhibited

Never Connect Your Wallet With Any Suspicious Site. Better You Should Create New Account For Airdrop Or Other Sites Joining.

[JeromeTash]

OP could you please help elaborate which is the copycat site?

In the code, is it a "1" pr and "l" (Letter L). It appears as though it 1. Otherwise, nice catch. It seems so hard to notice for a newbie.

[Gladitorcomeback]

I don't understand which one is real and which one is fake as both website domain is looking same. I think there is some writing mistake. The fake site has a letter L instead of digit 1 which looking similar to one. I will also add this phising site in my phising site list.

This domain just registered 2 days ago and you have caught much earlier.

Yes its quite new and i hope this site have not scammed big yet and has been exposed. This kind of phishing sites is now become very common and you will see many in twitter which is place of their promotion. We will be safe until we didn't connect our wallet.

[Dave1]

OP could you please help elaborate which is the copycat site?

In the code, is it a "1" pr and "l" (Letter L). It appears as though it 1. Otherwise, nice catch. It seems so hard to notice for a newbie.

See, even the two of you (Gladitorcomeback) are deceived already, caught by the fake website and that's why I said they used the attack vector is homograph.

https://en.wikipedia.org/wiki/IDN_homograph_attack

[albon]

What happened: There is a fake https://10ktf.com/ out there so be careful. And if you are going to look at https://opensea.io/collection/10ktf, it's one of the biggest out there. So criminals just copy the website and will ask you to connect your wallet right away.

Website:

Code:

https://l0ktf.com/

Really glad that Metamask has restricted the site; this warning will be a good way for people to close the phishing site after seeing this. 10KTF collection is well known on Opensea and famous; they are trying to create phishing domains similar to the official domain of the collection in order to trap victims and steal their NFTs which are currently floor priced at 0.09 ETH, and steal their entire wallet. Thank you, @OP, for this catch, and I hope you and anyone will continue to publish warnings about any new phishing platforms or sites and others to raise Newbies' awareness and warn them not to lose their assets.

[aioc]

OP could you please help elaborate which is the copycat site?

In the code, is it a "1" pr and "l" (Letter L). It appears as though it 1. Otherwise, nice catch. It seems so hard to notice for a newbie.

If not for your post I will had a hard time figuring out the difference between the two domains the scammer is very cunning, with a quick glance it's hard to tell the difference, it's good that Metamask is quick to block and give warnings to all visitors.

Always bookmark sites that you frequently visit and always take time to check the URL but on this one, it's quite hard to figure out, scammers never stop to find ways to scam people, so always be on alert.

[cryptomaniac_xxx]

OP could you please help elaborate which is the copycat site?

In the code, is it a "1" pr and "l" (Letter L). It appears as though it 1. Otherwise, nice catch. It seems so hard to notice for a newbie.

If not for your post I will had a hard time figuring out the difference between the two domains the scammer is very cunning, with a quick glance it's hard to tell the difference, it's good that Metamask is quick to block and give warnings to all visitors.

Always bookmark sites that you frequently visit and always take time to check the URL but on this one, it's quite hard to figure out, scammers never stop to find ways to scam people, so always be on alert.

Yeah, and install some apps too that will detect all this kind of phishing attempt as scammers will never stop, and on the contrary they continue to evolved their attacks and becoming hard to detect by using our naked eyes.

Just like what I found here, I was searching for gucci koda pendant, and this fake website pop up,

Code:

https://koda-pendant.com/

While base on my research, this is the original site, https://kodapendant.gucci.com/

[coin-investor]

This is the worst time to be complacent, just hours ago there was a piece of news on TV giving a warning to people about Crypto stealers if you're a Cryptocurrency investor, scammers are very active there's never been in the history of the internet that scammers have employed every method to steal from investors, because we are the sole protector of our coins, and scammers knows that not all investors are security conscious, so they keep doing an attack on exchanges, on individuals and companies.
So if you are planning to invest or you are already an investor, invest time and effort to learn to secure your machine, your wallet, and yourself.